Yep, I see now it has nothing to do with restricted export, 'cause
cap_get_file() wasn't there anyway. So I change the description as follows:
sys/capability.h exposes cap_get_file() and cap_set_file() as part of public
API, while as libcap.so.1 fails to provide corresponding text symbols.